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DETAILED ACTION 

1 . Claims 1 -28 are pending. 

Claim Rejections - 35 USC § 112 

2. Amendments and arguments with regard to the previous 1 12 rejections are accepted and 
persuasive. The previous 112 rejections are withdrawn. 

Response to Arguments 

3. Applicant's arguments filed July 9, 2007 have been fully considered but they are not 
persuasive. 

Applicant argues that Slick fails to teach use of an outer layer of message encryption 
having an associated outer-layer public key to encrypt the inner-layer public key. The examiner 
respectfully disagrees. Slick discloses an outer-layer of message encryption having an associated 
outer-layer user public key used to encrypt an inner-layer printer public key and since the printer 
public key is a key encrypted by the user's public key it represents an inner layer since it's inside 
relative to the user's public key, thus making the user's public key the outer layer public key 
associated with the outer layer enryption (10:12-45). 

Applicant further argues that Slick fails to disclose an inner layer of message encryption 
that has an associated inner-layer public key or use of an outer layer private key or inner layer 
private key. The examiner respectfully disagrees. Slick discloses an inner layer of message 
encryption that has an associated inner layer printer public key since the printer public key 
encrypts the symmetric key that encrypts the message, thus making it an inner layer of message 
encryption since it occurs inside the user's outer layer public key encryption (10: 12-45). An 
associated user private key and printer public key are used in decrypting the message (10:12-45). 
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In response to applicant's argument that there is no suggestion to combine the references, 
the examiner recognizes that obviousness can only be established by combining or modifying the 
teachings of the prior art to produce the claimed invention where there is some teaching, 
suggestion, or motivation to do so found either in the references themselves or in the knowledge 
generally available to one of ordinary skill in the art. See In re Fine, 837 F.2d 1071, 5 
USPQ2d 1596 (Fed. Cir. 1988)and In re Jones, 958 F.2d 347, 21 USPQ2d 1941 (Fed. Cir. 1992). 
In this case, it would have been obvious to combine the known technique of identity based 
encryption as disclosed in Boneh to improve the security of the invention of Boneh. 

Claim Rejections - 35 USC § 103 

The text of those sections of Title 35, U.S. Code not included in this action can be found 
in a prior Office action. 

4. Claims 1, 2, 4, 5, 6-9, 13, 16, 18, 21-23, 24-28 rejected under 35 U.S.C. 103(a) as being 
unpatentable over Slick et al. (Slick), U.S. Patent No. 7,003,667 in view of Boneh et al. (Boneh), 
U.S. Patent No. 7,113,594. 

As per claims 1 and 2: 

Slick substantially teaches a method comprising: 

at the sender, encrypting the message using at least two layers of encryption by using an 
inner layer of message encryption having an associated inner-layer public key to encrypt the 
message data and by using an outer layer of message encryption having an associated outer-layer 
public key to encrypt the inner-layer public key without using a symmetric key; sending the 
encrypted message to the recipient; and at the recipient, decrypting the encrypted message using 
an outer-layer private key corresponding to the outer-layer public key and using an inner-layer 
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private key corresponding to the inner layer public key (9:27-10:45, 1 1 :20-28, 1 1 :42-64 wherein 
it would have been obvious to combine the one embodiment of Slick that uses a public key to 
encrypt the public key that encrypts the symmetric key with the embodiment that encrypts the 
message using the public key and then encrypting the public key encrypted message again 
utilizing the first embodiment as suggested by Slick (1 1 :64-67). Since encrypting the message 
twice with a public key utilizes a lot of system resources, encrypting only the key saves 
resources while ensuring security (1 1 :67-12:7). 
As per claim 4: 

Slick substantially teaches a method further comprising: 

sending the encrypted message to the recipient comprises sending the encrypted inner- 
layer public key to the recipient with the encrypted message, and wherein decrypting the 
encrypted message at the recipient further comprises using the outer-layer private key to decrypt 
the encrypted inner-layer public key to produce an unencrypted version of the inner-layer public 
key at the recipient (1 :39-58). 

As per claim 5: 

Slick further teaches a method wherein encrypting the message comprises encrypting the 
message using at least three layers of encryption and wherein the outer layer is not an outermost 
layer (10:46-1 1 :28 wherein three keys equals three layers but the third is not the outermost layer 
since a signed hash can also be appended). 

As per claims 6-8, 21-23 and 24-26: 

Slick teaches a method comprising: 
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encrypting the message by performing at least an inner layer of encryption and an outer 
layer of encryption at the sender, wherein: performing the inner layer of encryption includes 
encrypting the message data M using a symmetric key S to produce encrypted message data Ms 
and encrypting the symmetric key S using an public key QG associated with the inner layer of 
encryption to produce an encrypted symmetric message key SQG, and performing the outer layer 
of encryption includes encrypting at least the public key QG using an public key QL, wherein the 
public key QL is less sensitive than the public key QG; and sending at least the encrypted 
message data Ms, the encrypted symmetric message key SQG, the public key QL, the encrypted 
key QGQL and the encrypted public key QG to the recipient (9:27-10:45, 1 1 :4-28). 

As per claim 9: 

Slick teaches a method further comprising: 

using the outer-layer private key to decrypt the inner-layer public key that has been 
encrypted using the outer-layer public key; using inner-layer private key to decrypt the 
symmetric key that has been encrypted using the inner-layer public key; and using the symmetric 
key that has been decrypted using the inner-layer private key to decrypt the message data that 
was encrypted using the symmetric key (12:7-51). 

As per claim 13: 

Slick further teaches a method wherein at least one of the data attributes has an associated 
sensitivity level and wherein encrypting the message data comprises using the sensitivity level in 
determining how to encrypt the message (1 : 14-22). 

As per claims 15 and 16: 
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Boneh further teaches a method wherein encrypting an email message comprises utilizing 
an age based policy (29:55-63). 
As per claims 27 and 28: 

Boneh further teaches a public key based on a recipient's email address (2:45-62). 

Slick fails to disclose the key and encryption being IBE, however, Boneh discloses 
utilizing IBE as an asymmetric encryption scheme (abstract). It would have been obvious to one 
of ordinary skill in the art at the time of applicant's invention to make the keys be identity based 
as suggested by Slick, in order to ensure the intended recipients receive the printout or fax, 
having keys based on their identity would ensure that only they could read it and only printers or 
fax machines associated with them could decrypt the information (Slick, 1 : 14-58). 
5. Claims 10, 1 1 and 18-20 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Slick in view of Boneh as applied to claim 1 above, and further in view of Van Oorschot et al. 
(Van Oorschot), U.S. Patent No. 5,850,443. 

As per claims 10 and 18-20: 

Slick and Boneh fail to disclose varying sensitivity levels of the multiple encryption keys 
and the keys having overlapping components. However, Van Oorschot discloses a method 
wherein varying strengths of multiple encryption keys are used and the keys are concatenated 
together, therefore each key shares the same components with all the others (4:16-56). 

It would have been obvious to utilize varying encryption key strengths along with 
overlapping components because it allows multiple parties to communicate over varying trust 
environments and to share cryptographic keys (Van Oorschot, 1:66-2:13). 

As per claim 1 1 : 
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Slick further teaches a method wherein encrypting the message comprises encrypting the 
message using at least three layers of encryption and wherein the outer layer is not an outermost 
layer (10:46-1 1 :28 wherein three keys equals three layers but the third is not the outermost layer 
since a signed hash can also be appended). 

6. Claim 17 rejected under 35 U.S.C. 103(a) as being unpatentable over Slick in view of 
Boneh as applied to claim 1 above, and further in view of Lord et al. (Lord), U.S. Patent No. 
7,131,003. 

With regard to claim 17, Slick and Boneh fail to teach the encrypted message comprising 
an instant message. However, Lord discloses a method of encrypting instant messages (2:35-49). 
It would have been obvious to one of ordinary skill in the art at the time of applicant's invention 
to increase the security of instant messages as suggested by Lord (1 :41-62). 

Allowable Subject Matter 

7. Claim 3 objected to as being dependent upon a rejected base claim, but would be 
allowable if rewritten in independent form including all of the limitations of the base claim and 
any intervening claims. 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
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will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kristin D. Sandoval whose telephone number is 571-272-7958. 
The examiner can normally be reached on Monday - Friday, 8:00-5:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9 1 99 (IN USA OR CANADA) or 57 1 -272- 1 000. 
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